fix(deps): update dependency jws to v4.0.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
jws	4.0.0 -> 4.0.1

---

Release Notes

brianloveswords/node-jws (jws)

v4.0.1

Compare Source

Changed

• Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require
  that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key)
  when using HMAC algorithms.
• Upgrading JWA version to 2.0.1, adressing a compatibility issue for Node >= 25.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Output of pnpm why jws:

Legend: production dependency, optional only, dev only

@cyclonedx/[email protected] /home/runner/work/cdxgen/cdxgen

dependencies:
jws 4.0.1

Output of jq on components:

{
  "authors": [
    {
      "name": "Brian J Brennan"
    }
  ],
  "group": "",
  "name": "jws",
  "version": "4.0.1",
  "description": "Implementation of JSON Web Signatures",
  "scope": "required",
  "hashes": [
    {
      "alg": "SHA-512",
      "content": "10a23f33fcaa3e7706514878e31cf43f14a275716bffeaf4a40ef4fa0218863bfe7adef2c4cfacdbd63e5460e4a2f4687d07a6d1fb3b52f7f8f9898077245db8"
    }
  ],
  "licenses": [
    {
      "license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }
    }
  ],
  "purl": "pkg:npm/[email protected]",
  "externalReferences": [
    {
      "type": "vcs",
      "url": "https://github.com/brianloveswords/node-jws#readme"
    },
    {
      "type": "vcs",
      "url": "git://github.com/brianloveswords/node-jws.git"
    }
  ],
  "type": "library",
  "bom-ref": "pkg:npm/[email protected]",
  "properties": [
    {
      "name": "SrcFile",
      "value": "pnpm-lock.yaml"
    },
    {
      "name": "ImportedModules",
      "value": "jws"
    }
  ],
  "evidence": {
    "identity": [
      {
        "field": "purl",
        "confidence": 1,
        "methods": [
          {
            "technique": "manifest-analysis",
            "confidence": 1,
            "value": "pnpm-lock.yaml"
          }
        ],
        "concludedValue": "pnpm-lock.yaml"
      }
    ],
    "occurrences": [
      {
        "location": "bin/cdxgen.js#9"
      },
      {
        "location": "bin/verify.js#7"
      }
    ]
  },
  "tags": [
    "json",
    "web"
  ]
}

Output of jq on dependencies:

{
  "ref": "pkg:npm/[email protected]",
  "dependsOn": [
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]"
  ]
}
{
  "ref": "pkg:npm/@cyclonedx/[email protected]",
  "dependsOn": [
    "pkg:npm/@babel/[email protected]",
    "pkg:npm/@babel/[email protected]",
    "pkg:npm/@iarna/[email protected]",
    "pkg:npm/@isaacs/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]"
  ]
}